PT-2025-47660 · WordPress · Wordpress+1

Lucas Montes · Published 2025-11-21 · Updated 2026-02-09 · CVE-2025-11368

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LearnPress – WordPress LMS Plugin versions prior to 4.2.9.5

Description The LearnPress – WordPress LMS Plugin for WordPress is affected by a sensitive information disclosure issue. Missing capability checks in the REST endpoint /wp-json/lp/v1/load content via ajax allow arbitrary callback execution of admin-only template methods. This enables unauthenticated attackers to retrieve sensitive educational content, including admin curriculum HTML, quiz questions with correct answers, and course materials, by supplying valid numeric IDs to the REST API endpoint. The vulnerable parameter is the numeric ID supplied to the /wp-json/lp/v1/load content via ajax endpoint.

Recommendations Versions prior to 4.2.9.5 should be updated.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-11368

Affected Products

Learnpress

Wordpress

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-11368 · Security Note
• https://t.me/CVEtracker/37894 · Telegram Post
• https://plugins.trac.wordpress.org/browser/learnpress/trunk/inc/rest-api/v1/frontend/class-lp-rest-ajax-controller.php#L41 · Note
• https://twitter.com/pdnuclei_bot/status/2020679076382687423 · Twitter Post
• https://t.me/cveNotify/143527 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?old_path=/learnpress/tags/4.2.9.4&new_path=/learnpress/tags/4.3.0&sfp_email=&sfph_mail= · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/0c9856db-3779-4649-9a48-1c7b6d019816?source=cve · Note
• https://plugins.trac.wordpress.org/browser/learnpress/trunk/inc/rest-api/v1/frontend/class-lp-rest-ajax-controller.php#L23 · Note